Cannot log into Mac thats Binded to Active Directory 1

[sebjenkins]

Hi,

I'm not sure if this is the correct forum for this query but here goes. Recently, I managed to BIND my Apple MacBook Pro laptop to our Microsoft Active Directory. The computer now has a computer account in the Workstations OU.
Once the computer was bound to the domain, I was then expecting to restart and log into OSX using my domain credentials but it won't work.
I can work out why. I'm assuming that connectivity between the computer and the AD is o.k. as the computer has a valid computer account.
Has anybody got any experience of this at all ?

Many thanks

 

[Serbtastic]

What happens when you try to login?

 

[sebjenkins]

The OSX LoginWindow just 'shakes'.

Out of curiousity, I tried a 3rd party product by Thursby called ADmit Mac and it worked fine. Joined my machine to the domain and I was able to log on using domain credentials.
But using Apples Directory Access plugin I can only get the computer account created but not the authentication.

 

[paella33]

Do you have multiple domains? If so, do you authenticate to All Domains or one specific?

 

[sebjenkins]

erm, I think we have the one main domain with some sub domains in it ?I'd have to get that confirmed.
The users in the UK log onto a domain called 'IT' which os part of the main domain which is called something else.

 

[sebjenkins]

O.K. further to this I have been onformed by our infrastructure team that in the UK we have one domain but this is a child domain of an AD forest *the root is in New York) which is comprised of many domains.
But when I see our Windows users logging onto their machines they are logging onto the 'IT' domain which is the child domain here in the UK.

 

[paella33]

Go to the Utilities folder, start Directory Access, check the tab Authentication. Does it say All Domains or the IT domain? The way it works here is that we have to set it to the correct domain. Which you can force by (de)selecting the option Allow authentication from any domain in the forest

 

[sebjenkins]

Thanks to paella33, unchecking the 'Allow authentification from any domain....' now allows me to log onto the Mac using my domain credentials at the oSX LoginWindow.

Thanks.